Your EtherPK Account
An EtherPK Account is the sign-in identity for EtherPK's managed service: the Account site at www.etherpk.com, the hosted Client at app.etherpk.com and the managed Sync Server. One sign-in carries across all three. You do not need one for a local graph, for the demo, or for a Sync Server you run yourself.
The account signs you in. It is not what encrypts your notes: that is your device's keys and your Recovery Code, which the account never holds (Recovery Code And Device Approval).
Create an account
On www.etherpk.com select Get started, or Sign in > Register. Give a name, an email address and a password of at least 8 characters, or continue with GitHub or Google. You are signed in at once and a verification email follows; its link is valid for an hour. Some things wait for a verified address: linking a social account, and being invited to a shared graph.
Every account starts on the Free plan.
Sign in
Sign in with your email and password, with GitHub or Google, or with a passkey. An account with two-factor authentication turned on is asked for its six-digit code after a password sign-in (a passkey or social sign-in is not). Forgot password? emails a reset link valid for an hour; resetting the password signs out every other session.
Signing in on the Account site signs the hosted Client and the managed Sync Server in as well on their next visit, so the Client's Continue to secure sign in rarely needs a password. A session lasts 7 days and is extended while you use it.
The Account page
Account in the header opens your profile and security settings.
- Email. Change it by entering the new address; a verification email goes there, and the address changes when you open the link.
- Connected accounts. Link or unlink GitHub and Google. You cannot unlink your only way of signing in, and linking needs a verified email address.
- Two-factor authentication. Enable asks for your password, shows a QR code (or the secret to type) for an authenticator app such as Google Authenticator or Authy, and gives you ten backup codes, shown once, with Copy codes. Confirm with a code from the app. As of September 2026 the sign-in page has no field for a backup code, so keep an authenticator you can reach. Disable asks for your password.
- Passkeys. Add a passkey registers your fingerprint, face or screen lock as a way to sign in, under a name you choose. Rename or remove one at any time; the last sign-in method cannot be removed. A passkey is bound to www.etherpk.com and does not sign in to a self-hosted server. These are account passkeys; the passkeys that unlock protected documents are a separate thing, bound per device (Protected Documents).
- Password. Change it, or set one if you signed up with GitHub or Google and want to sign in by email too.
The page does not yet offer a name change or account deletion. Ask through the contact page for either.
Billing and plans
Billing in the account menu shows your plan and lets you change it.
| Free | Sync+ | |
|---|---|---|
| Costs | Nothing | A flat monthly subscription |
| The editor, local graphs, self-hosting | Yes | Yes |
| Synced graphs you own on the managed service | None | Up to the plan's limit |
| Joining graphs a Sync+ subscriber shares with you | Yes | Yes |
| End-to-end encrypted sync, live co-editing, managed storage for images and files | Through someone else's graph only | Yes |
The pricing page on www.etherpk.com shows the current price and the exact limits: owned graphs, encrypted storage, players per graph and the largest single file.
Start your trial takes you to Stripe. A card is taken up front; cancel before the trial ends and you pay nothing. An account gets one trial, so a restarted subscription starts paid. Your plan updates within a minute of Stripe confirming, and the Billing page then shows the renewal date, how much of each limit the graphs you own use, and a warning as you near one.
Payment details opens Stripe's portal, which is where you change the card, see invoices and cancel. Cancelling stops renewal at the end of the paid period.
When Sync+ ends
When the subscription ends, by cancelling or by a failed payment past its grace period, the graphs you own become read-only: you can still open them, keep a Local Mirror of them and delete them, and anyone you shared them with can still read them, but nobody can write. After a retention period the managed service deletes them, so mirror anything you want to keep first (Keeping A Local Copy Of A Synced Graph). Graphs shared with you belong to their owner and are unaffected, and local folder graphs are never touched. Restarting Sync+ makes owned graphs writable again.
While you are read-only, an edit is refused with a message saying so and stays on the device; it is retried once the plan allows.
Sign out or disconnect
- Sign out of EtherPK, in the account menu of any of the three apps, signs all three out together and locks the encryption keys held in this browser. It deletes nothing.
- Disconnect this device, in the Client, is narrower: it ends this Client's sync connection and locks its keys while the Account site and Sync Server stay signed in. The Client then shows Sign in.
- Sync unavailable in the Client's header means something else: the server could not be reached, or your sign-in could not be confirmed.
Access tokens
The managed Sync Server's Access tokens page, reached from the account menu, creates Personal Access Tokens for programs that sync as you: the Headless Client that gives an AI agent a synced graph (The Headless Client). A token authenticates and cannot decrypt anything. Revoke it there to cut a program off.